"npm install" your secrets like any other dependency.

Vaults = source of truth Git = distribution layer OneSeal: make the bridge between them